Vulnerabilities > CVE-2021-39280 - Unspecified vulnerability in Korenix products

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

korenix

NVD

Published: 2022-02-06

Updated: 2024-11-21

Summary

Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-31.

Vulnerable Configurations

Part	Description	Count
OS	Korenix Korenix Jetwave 2212S Firmware - Korenix Jetwave 2212S Firmware 1.3.0 Korenix Jetwave 2212S Firmware 1.5 Korenix Jetwave 2212G Firmware - Korenix Jetwave 2212G Firmware 1.3.T Korenix Jetwave 2212G Firmware 1.4 Korenix Jetwave 2311 Firmware - Korenix Jetwave 2311 Firmware 1.2 Korenix Jetwave 3220 Firmware - Korenix Jetwave 3220 Firmware 1.2 Korenix Jetwave 3420 Firmware - Korenix Jetwave 3420 Firmware 1.1.3T Korenix Jetwave 2212X Firmware - Korenix Jetwave 2212X Firmware 1.3.0 Korenix Jetwave 2212X Firmware 1.5	15
Hardware	Korenix Korenix Jetwave 2212S - Korenix Jetwave 2212G - Korenix Jetwave 2311 - Korenix Jetwave 3220 3 Korenix Jetwave 3420 3 Korenix Jetwave 2212X -	6

Summary

Vulnerable Configurations

References